WP Cookie Notice for GDPR, CCPA & ePrivacy Consent
WP Legal Pages
Developer
4.4.3
Latest version
9,000
Installations
No date
Last updated
Vulnerability history
0 present
19 patched
8 Mitigation rules
- Admin+ SQLi vulnerability< 4.4.21 day ago
- Unauthenticated Arbitrary File Upload vulnerability<= 4.4.13 days ago
- Arbitrary File Upload vulnerability<= 4.4.15 days ago
- Cross Site Scripting (XSS) vulnerability<= 4.3.918/08/2026
- Authenticated (Subscriber+) Stored Cross-Site Scripting via 'regionArray' Parameter vulnerability<= 4.3.517/08/2026
- Cross-Site Request Forgery vulnerability<= 4.3.727/07/2026
- Authenticated (Administrator+) SQL Injection vulnerability<= 4.3.609/07/2026
- Missing Authorization to Authenticated (Subscriber+) Scan Schedule Modification vulnerability<= 4.3.609/07/2026
- Authenticated (Administrator+) SQL Injection vulnerability<= 4.3.502/07/2026
- Missing Authorization to Sensitive Information Exposure vulnerability<= 4.1.219/02/2026
- Broken Access Control vulnerability<= 4.0.330/12/2025
- Missing Authorization to Unauthenticated Arbitrary Post Deletion vulnerability<= 4.0.716/12/2025
- Broken Access Control vulnerability<= 4.0.715/12/2025
- Broken Access Control vulnerability<= 4.0.308/11/2025
- Cross Site Request Forgery (CSRF) Vulnerability<= 3.8.005/06/2025
- Missing Authorization to Authenticated (Subscriber+) Whitelist Script vulnerability<= 3.6.512/12/2024
- Unauthenticated Stored Cross-Site Scripting via Client-IP header vulnerability<= 3.2.025/06/2024
- Missing Authorization to Unauthenticated Arbitrary Post Deletion vulnerability<= 3.0.217/04/2024
- CSV Injection vulnerability<= 2.2.520/06/2023